Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/323830343a323935343a3a2f33322d3332203d3e20323634303039.roa
File:                     323830343a323935343a3a2f33322d3332203d3e20323634303039.roa (raw, json)
Hash identifier:          yfOypkgVyEWE5M50wVpwzHS/NYMQeFcpydy9ogr30/U=
Subject key identifier:   87:D0:2E:3B:0E:88:D1:E6:45:03:B2:A6:28:75:76:DA:E1:C4:6D:80
Certificate issuer:       /CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
Certificate serial:       1DA4EAB9598AB184A5DBE938E46CE1A30D0AFABD
Authority key identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/323830343a323935343a3a2f33322d3332203d3e20323634303039.roa
Signing time:             Fri 27 Mar 2026 20:14:56 +0000
ROA not before:           Fri 27 Mar 2026 20:09:56 +0000
ROA not after:            Fri 26 Mar 2027 20:14:56 +0000
asID:                     264009
IP address blocks:        2804:2954::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl
                          rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 10:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a4:ea:b9:59:8a:b1:84:a5:db:e9:38:e4:6c:e1:a3:0d:0a:fa:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
        Validity
            Not Before: Mar 27 20:09:56 2026 GMT
            Not After : Mar 26 20:14:56 2027 GMT
        Subject: CN=87D02E3B0E88D1E64503B2A6287576DAE1C46D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:f5:88:52:72:a1:00:ef:93:b7:01:29:06:
                    d1:9f:d3:23:50:4f:aa:87:76:7e:d9:1d:d5:16:ce:
                    6a:c6:bd:8f:77:02:e8:f5:e6:66:da:6d:48:5a:9b:
                    ab:13:bb:8b:df:21:2c:cd:0e:c7:bd:53:f8:b5:cf:
                    e3:7b:a2:92:18:e7:47:8f:f1:a9:eb:22:d6:f5:89:
                    2a:26:1f:f1:30:0d:29:c1:a7:67:16:12:d9:90:fa:
                    e8:41:f9:a6:61:e9:35:a3:01:e1:63:49:a7:f4:17:
                    60:d2:1a:90:ed:cc:af:1f:ee:bd:60:b9:f8:a6:85:
                    d6:80:69:70:48:15:c4:6b:34:54:a6:7a:b8:eb:7e:
                    53:ed:bd:25:2a:0f:90:2c:84:f7:5c:42:01:f0:61:
                    dd:db:de:67:41:4e:77:05:07:4b:42:66:db:37:42:
                    bf:26:c8:ed:59:39:83:b3:14:d7:d1:92:6c:e1:5a:
                    4d:4b:85:c9:db:6a:6c:18:7a:96:de:25:74:52:aa:
                    f8:55:e8:cd:24:55:f4:f8:44:bd:16:76:91:8d:ad:
                    52:19:8c:1a:21:f2:aa:80:51:7f:0c:5a:5b:e0:c5:
                    55:2a:42:f7:ca:a7:85:d9:7d:22:9b:11:b7:c1:32:
                    4f:8a:98:64:89:18:33:4b:81:9b:c1:9a:fd:47:47:
                    c0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D0:2E:3B:0E:88:D1:E6:45:03:B2:A6:28:75:76:DA:E1:C4:6D:80
            X509v3 Authority Key Identifier:
                keyid:1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/323830343a323935343a3a2f33322d3332203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2954::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:a7:7c:09:3a:06:ef:40:5d:91:cf:2c:66:ca:fb:b0:bf:c2:
         fb:b6:12:bc:51:bd:23:c3:17:91:b2:9b:60:b8:49:e5:be:e4:
         c3:61:10:75:c4:d9:01:e1:04:00:a9:ec:20:5a:94:61:08:63:
         db:fa:1e:f2:b7:18:35:ec:ef:3f:d4:5c:77:e7:2c:74:23:9a:
         70:26:83:4d:1e:af:0a:96:07:88:7c:50:7e:e8:6b:9d:bb:e3:
         6a:58:1c:61:92:e0:b2:6e:e6:3d:cc:26:db:ee:57:2f:99:bd:
         68:48:16:63:d3:86:3f:79:35:50:0a:ab:62:6c:0b:7c:ef:ef:
         50:b0:ba:b2:fb:e1:06:f3:a0:3c:ed:d1:87:7a:68:e5:07:2f:
         f8:be:43:49:73:cb:41:99:34:37:76:1f:25:2a:6d:1b:10:5c:
         fe:95:72:79:65:e7:a1:c1:e9:f9:f1:e1:1c:7c:ea:81:80:80:
         ba:74:b4:90:e3:e1:cb:7d:18:31:4a:91:fe:d4:94:bd:25:03:
         58:32:f5:e6:78:01:58:8f:9b:88:e9:21:7c:54:76:50:32:74:
         ad:79:98:43:0d:43:67:72:7e:5f:6a:87:80:66:8e:0a:19:0b:
         bd:46:c5:b8:66:6e:17:b9:a9:3e:02:47:24:78:0c:c5:2e:33:
         6d:3d:e6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:52:02 2026 by rpki-client